Free tool · Syxel Security

How ready are you for the Data Protection Act?

Answer 12 questions about how your organization handles personal data. You'll get a readiness score and a list of the gaps to close first. It takes about three minutes.

1.Do you know what personal data you collect, where it is stored and who can access it?
2.Have you checked whether you must register with the Office of the Information Commissioner, and registered if required?
3.Have you appointed a Data Protection Officer, or confirmed that you are not required to?
4.Do you tell people clearly, when you collect their data, what you will use it for?
5.Do you have a recorded lawful basis, such as consent or a contract, for each way you use personal data?
6.Do you keep personal data only as long as you need it, following a written retention schedule?
7.Is personal data protected with access controls, encryption where appropriate, and tested backups?
8.Could you detect a personal data breach and report it to the Information Commissioner within 72 hours?
9.Do you have a process for people who ask for a copy of their data, or ask you to correct it or stop using it?
10.Have staff who handle personal data been trained on data protection in the last 12 months?
11.Do your contracts with vendors who handle your data (payroll, cloud, IT, marketing) include data protection terms?
12.If personal data is stored or sent outside Jamaica, have you checked that the transfer meets the Act's requirements?
0 of 12 answered